Overview

overview

10

Static

static

10

d36085fb62...18.ps1

windows7-x64

3

d36085fb62...18.ps1

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d36085fb62a472ed7113d6a49897fbe4_JaffaCakes118

  • Size

    47KB

  • Sample

    240908-dgqsdsteka

  • MD5

    d36085fb62a472ed7113d6a49897fbe4

  • SHA1

    4457c5f2a21f664c8988f9e19d9e08c34649881b

  • SHA256

    7b1dd6809826dfc8a7aa776c4d31ff414dbd9d90d32eb506b3ca7a32b312f126

  • SHA512

    7683a33a5284d192256a03db8c2456a761e1199c3b3f9ba332a522946174140d4036877c8a7c81a7f7812fdb6d809bb9d632c082aee599dba2f12875bd0a6475

  • SSDEEP

    384:Rqpz6b6EVeqgop8Lvp2vurKew4v9zSoH2RY18htAp95FfX4bCKOnQogXcw/3vZK2:WOb6EVeqVpyvIsjkoHd+cw/3vk2lvtd

Score
10/10
revengeratguestexecution

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

tikusgot.ddns.net:9595

Mutex

RV_MUTEX

Targets

    • Target

      d36085fb62a472ed7113d6a49897fbe4_JaffaCakes118

    • Size

      47KB

    • MD5

      d36085fb62a472ed7113d6a49897fbe4

    • SHA1

      4457c5f2a21f664c8988f9e19d9e08c34649881b

    • SHA256

      7b1dd6809826dfc8a7aa776c4d31ff414dbd9d90d32eb506b3ca7a32b312f126

    • SHA512

      7683a33a5284d192256a03db8c2456a761e1199c3b3f9ba332a522946174140d4036877c8a7c81a7f7812fdb6d809bb9d632c082aee599dba2f12875bd0a6475

    • SSDEEP

      384:Rqpz6b6EVeqgop8Lvp2vurKew4v9zSoH2RY18htAp95FfX4bCKOnQogXcw/3vZK2:WOb6EVeqVpyvIsjkoHd+cw/3vk2lvtd

    Score
    3/10
    execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks